Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e5995fe-f42f-36b6-a164-3a257b8f5c52.roa
File:                     1e5995fe-f42f-36b6-a164-3a257b8f5c52.roa (raw, json)
Hash identifier:          +2oW6O4FfD+n+T4HPc0/p6OWK9MQAduAXxO7bC8KZ60=
Subject key identifier:   A3:96:D5:CF:D7:30:F3:C9:E4:29:96:47:D2:D7:3B:5D:A6:9C:FC:CD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B6E91FE30CE9C890E981E7500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e5995fe-f42f-36b6-a164-3a257b8f5c52.roa
Signing time:             Mon 06 Oct 2025 13:00:41 +0000
ROA not before:           Mon 06 Oct 2025 13:00:41 +0000
ROA not after:            Sun 04 Jan 2026 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1012:b358::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:91:fe:30:ce:9c:89:0e:98:1e:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  6 13:00:41 2025 GMT
            Not After : Jan  4 14:00:41 2026 GMT
        Subject: CN=e2cc96e3-9312-4a9f-b9aa-3eb264ba4c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ac:0b:f6:b6:18:ca:ab:3a:13:d4:aa:cd:f6:
                    7c:9b:f8:79:d2:2f:f3:22:41:62:89:5e:dd:6c:10:
                    cb:bf:9a:ef:cd:c2:a2:dc:3b:5f:83:56:6f:53:c9:
                    df:5f:60:6b:96:9e:d2:7f:7e:3f:d7:fe:06:8f:a2:
                    e2:0e:9a:01:63:67:e9:9d:56:1d:50:79:34:8f:01:
                    44:c2:c1:e3:12:5b:a9:43:3b:40:cd:dd:c1:9f:d3:
                    7e:7b:e4:47:d6:65:b5:a7:a9:1c:7a:3c:17:46:d9:
                    11:77:f6:47:0d:96:b9:59:cf:53:b0:6a:64:3b:69:
                    f9:28:21:f7:65:9e:13:9d:a8:e3:07:e7:8a:47:15:
                    42:8a:48:59:6a:c7:ce:f9:60:c4:be:f5:7e:fb:25:
                    59:2d:e9:a9:b6:28:ff:14:c9:a2:ff:c2:a4:21:73:
                    24:94:b1:d0:85:98:c8:c0:ed:e4:f2:13:d4:78:b3:
                    c3:92:39:1c:39:4b:d0:ce:52:89:e4:ec:a0:b8:dd:
                    7f:32:8b:e1:e3:6b:3f:e3:9a:3d:a6:39:bf:e0:71:
                    03:44:93:3a:29:37:cc:91:83:aa:6c:c1:8d:76:41:
                    a6:e9:e6:20:ab:e8:c8:03:98:82:f4:f6:cd:7d:27:
                    82:63:28:02:ee:60:dc:d2:dd:1f:0e:52:31:27:b7:
                    f9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:96:D5:CF:D7:30:F3:C9:E4:29:96:47:D2:D7:3B:5D:A6:9C:FC:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e5995fe-f42f-36b6-a164-3a257b8f5c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:b358::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:34:8e:eb:d0:f1:36:4f:94:50:53:5f:07:cb:bb:fd:ac:d1:
         78:0d:31:a9:e7:a6:2d:aa:69:cc:e3:38:fa:44:2f:63:a9:a6:
         16:83:67:cb:2f:50:2b:d2:5f:fe:95:d1:3d:a3:d5:73:fe:3e:
         97:81:94:4a:5e:76:f3:1d:ae:68:5a:90:8d:c6:71:40:ad:32:
         26:18:68:98:81:48:05:1e:bd:66:e9:95:0c:be:2d:1e:9e:5c:
         47:e7:d1:b8:09:4b:65:6b:4b:b1:42:49:e8:e5:42:b8:e0:f9:
         c7:5a:29:87:bc:a2:92:88:6f:e9:30:7d:b0:de:d6:b3:af:48:
         d9:06:d5:f5:eb:b3:7e:55:21:92:38:9f:63:cd:21:20:52:c1:
         e8:49:9e:ec:3b:5e:41:d3:d5:ee:a3:e0:68:d1:18:66:33:e6:
         12:46:52:f8:0a:6b:c5:b2:9a:80:10:09:4b:36:70:ee:ce:67:
         95:75:1e:1f:bd:c4:97:80:e2:87:14:56:13:2f:4f:38:25:5b:
         88:d2:64:31:50:b3:85:95:9c:3c:81:4b:1b:22:40:2c:23:f7:
         6a:0d:d3:8f:24:3b:3a:a6:03:e0:df:b7:f9:e3:86:ca:9b:7d:
         22:e8:62:86:bf:1a:73:88:5d:0a:46:0c:b9:d7:a3:0b:4f:d9:
         8c:19:7e:0d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtukf4wzpyJDpgedQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZTJjYzk2ZTMtOTMxMi00YTlmLWI5YWEtM2ViMjY0YmE0YzYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqwL9rYYyqs6E9SqzfZ8m/h50i/zIkFiiV7d
bBDLv5rvzcKi3Dtfg1ZvU8nfX2Brlp7Sf34/1/4Gj6LiDpoBY2fpnVYdUHk0jwFE
wsHjElupQztAzd3Bn9N+e+RH1mW1p6kcejwXRtkRd/ZHDZa5Wc9TsGpkO2n5KCH3
ZZ4TnajjB+eKRxVCikhZasfO+WDEvvV++yVZLemptij/FMmi/8KkIXMklLHQhZjI
wO3k8hPUeLPDkjkcOUvQzlKJ5OyguN1/Movh42s/45o9pjm/4HEDRJM6KTfMkYOq
bMGNdkGm6eYgq+jIA5iC9PbNfSeCYygC7mDc0t0fDlIxJ7f5TwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKOW1c/XMPPJ5CmWR9LXO12mnPzNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWU1OTk1ZmUtZjQyZi0z
NmI2LWExNjQtM2EyNTdiOGY1YzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQErNY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAA0juvQ8TZPlFBTXwfLu/2s0XgNMannpi2qaczjOPpEL2OpphaD
Z8svUCvSX/6V0T2j1XP+PpeBlEpedvMdrmhakI3GcUCtMiYYaJiBSAUevWbplQy+
LR6eXEfn0bgJS2VrS7FCSejlQrjg+cdaKYe8opKIb+kwfbDe1rOvSNkG1fXrs35V
IZI4n2PNISBSwehJnuw7XkHT1e6j4GjRGGYz5hJGUvgKa8WymoAQCUs2cO7OZ5V1
Hh+9xJeA4ocUVhMvTzglW4jSZDFQs4WVnDyBSxsiQCwj92oN048kOzqmA+Dft/nj
hsqbfSLoYoa/GnOIXQpGDLnXowtP2YwZfg0=
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:57:27 2025 by rpki-client